summaryrefslogtreecommitdiffstats
path: root/crypto/x509
AgeCommit message (Expand)Author
2018-10-18Apply self-imposed path length also to root CAsViktor Dukhovni
2018-10-18Only CA certificates can be self-issuedViktor Dukhovni
2018-09-27Merge 1.0.2 setuid calls to getenv(3) safety.Pauli
2018-05-21Fix undefined behaviour in X509_NAME_cmp()Matt Caswell
2018-05-05X509 time: tighten validation per RFC 5280Emilia Kasper
2018-04-19Don't crash if there are no trusted certsMatt Caswell
2018-04-19X509_cmp_time: only return 1, 0, -1.Emilia Kasper
2018-02-21X509V3_EXT_add_nconf_sk, X509v3_add_ext: fix errors handlingPavel Kopyl
2017-12-08Standardize syntax around sizeof(foo)Rich Salz
2017-08-07Avoid surpising password dialog in X509 file lookup.Bernd Edlinger
2017-08-04Add a missing CRYPTO_w_unlock in get_cert_by_subjectBernd Edlinger
2017-06-10Remove needless type casting.Rich Salz
2017-03-13Fix a memory leak in X509_STORE_add_cert/crl error handling.Bernd Edlinger
2017-02-06Combined patch for the more or less obvious issuesBernd Edlinger
2016-09-26Add some sanity checks when checking CRL scoresMatt Caswell
2016-09-11Fix memory leak on error.Dr. Stephen Henson
2016-08-26Fix a few leaks in X509_REQ_to_X509.FdaSilvaYY
2016-08-19Fix NULL-return checks in 1.0.2Rich Salz
2016-08-03Don't check any revocation info on proxy certificatesRichard Levitte
2016-07-29Fix CRL time comparison.Dr. Stephen Henson
2016-07-22Use newest CRL.Dr. Stephen Henson
2016-06-29Fix proxy certificate pathlength verificationRichard Levitte
2016-06-29Check that the subject name in a proxy cert complies to RFC 3820Richard Levitte
2016-06-10Fix an error path leak in int X509_ATTRIBUTE_set1_data()Matt Caswell
2016-05-19Ensure verify error is set when X509_verify_cert() failsViktor Dukhovni
2016-05-17Remove repeated condition from if in X509_NAME_onelineMatt Caswell
2016-05-03Prevent EBCDIC overread for very long stringsMatt Caswell
2016-04-29Add checks to X509_NAME_oneline()Dr. Stephen Henson
2016-04-29Sanity check buffer length.Dr. Stephen Henson
2016-02-05Fix missing ok=0 with locally blacklisted CAsViktor Dukhovni
2016-01-17Empty SNI names are not validViktor Dukhovni
2016-01-02Fix X509_STORE_CTX_cleanup()Viktor Dukhovni
2015-10-23Remove useless codeAlessandro Ghedini
2015-09-15RT4044: Remove .cvsignore files.Rich Salz
2015-09-02Better handling of verify param id peername fieldViktor Dukhovni
2015-08-28GH354: Memory leak fixesAlessandro Ghedini
2015-08-14Fix 1.0.2 build breakRich Salz
2015-08-13GH364: Free memory on an error pathIsmo Puustinen
2015-07-07Reject calls to X509_verify_cert that have not been reinitialisedMatt Caswell
2015-07-07Add test for CVE-2015-1793Matt Caswell
2015-07-07Fix alternate chains certificate forgery issueMatt Caswell
2015-06-11Fix length checks in X509_cmp_time to avoid out-of-bounds reads.Emilia Kasper
2015-05-23Fix the update target and remove duplicate file updatesRichard Levitte
2015-05-20Correctly check for export size limitKurt Roeckx
2015-05-13Add NULL checks from masterRich Salz
2015-05-04Fix cut/paste errorRich Salz
2015-05-02RT3776: Wrong size for mallocRich Salz
2015-04-29Revert "Fix verify algorithm."Matt Caswell
2015-04-20Fix verify algorithm.Dr. Stephen Henson
2015-04-20Add flag to inhibit checking for alternate certificate chains. Setting thisMatt Caswell
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-17 02:50:35 +0000